Allow ssh user to read but prevent delete of a file

I have some ssh users that I want to grant read-ONLY access to files.

Actually, I want the owner to have read/write privileges, and the group and anon world to have read ONLY privileges (without the ability to delete). Only the owner should be able to delete.

If I set the permission to: 644 ... shouldn't that do it?

The rm command still allows group members to remove write protected files.

Is there a way to solve this problem?

 

use the setfacl to set acls on the file.